This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          OrjJrQINz2tyxgyIin9ciu2j8UzQ7L8l5EUDsTGeXLQ=
Subject key identifier:   C0:77:D2:98:41:F0:10:A4:FC:2E:43:60:CD:A0:AD:01:C5:7E:93:6C
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       5336094F40F44A838AC480AD0863836330850761
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 06 Jan 2026 19:31:28 +0000
ROA not before:           Tue 06 Jan 2026 19:26:28 +0000
ROA not after:            Tue 05 Jan 2027 19:31:28 +0000
asID:                     264688
IP address blocks:        190.107.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:36:09:4f:40:f4:4a:83:8a:c4:80:ad:08:63:83:63:30:85:07:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Jan  6 19:26:28 2026 GMT
            Not After : Jan  5 19:31:28 2027 GMT
        Subject: CN=C077D29841F010A4FC2E4360CDA0AD01C57E936C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:ce:6e:e1:66:c9:22:48:b5:24:3b:04:b9:
                    54:7c:f4:d2:d7:31:0c:93:04:8a:c1:e5:66:50:ee:
                    0b:90:49:c0:bc:75:57:76:97:23:61:01:3c:e3:1c:
                    2c:9f:53:03:9e:3a:8f:c9:0d:2e:20:c4:69:f7:95:
                    a6:f6:1d:02:d8:4a:35:02:bb:44:f4:d1:ac:dd:63:
                    ed:19:59:06:5e:27:85:20:f5:f8:bf:6e:ca:a2:a4:
                    6c:a8:ce:8f:57:1a:2e:79:8a:ed:cc:47:22:6e:18:
                    4f:58:d5:1e:20:cf:ed:90:7e:7d:e0:98:9b:db:1b:
                    cd:1d:41:90:c2:8f:5d:b1:80:27:c9:de:a0:56:6f:
                    98:8f:ea:64:94:4b:5b:bf:e2:85:12:2b:3d:1d:87:
                    f3:f6:49:14:b4:95:e0:0d:6f:2c:6d:37:75:0a:18:
                    06:73:c2:f6:65:12:2a:fe:18:5c:61:5c:eb:ab:f3:
                    31:33:89:b8:4d:ac:54:f7:de:d4:20:4d:97:05:f1:
                    49:00:96:a8:cd:8e:43:7d:eb:ff:b7:a7:f2:f4:f5:
                    a4:04:67:0c:4b:e5:a9:44:4b:88:fc:45:72:a4:2f:
                    5f:29:f0:4c:dd:2b:d8:a8:72:db:63:7a:97:fc:51:
                    7f:b7:69:81:f8:d9:db:89:fa:c5:0d:f9:d6:32:8a:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:77:D2:98:41:F0:10:A4:FC:2E:43:60:CD:A0:AD:01:C5:7E:93:6C
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:c3:b7:05:8c:74:eb:26:16:7f:03:37:7d:8f:6d:ec:34:ee:
         0b:fd:d8:54:d7:9e:2b:a3:a5:27:c0:99:3e:a0:41:cf:31:5c:
         51:4e:7d:45:49:24:27:ab:d8:5e:6f:cb:25:b9:3f:70:71:ef:
         48:91:dd:5c:d3:f0:ac:33:2f:17:9a:ea:1c:d9:3a:5e:98:a8:
         9e:1c:84:e6:a1:e1:45:c9:70:22:14:19:f7:01:70:08:98:be:
         8f:2f:92:c4:1d:a4:be:3b:fc:47:54:0b:4d:80:97:4b:f7:59:
         15:64:31:7d:a4:77:78:45:81:f0:8d:60:2e:74:ed:2c:54:2a:
         7d:94:31:0e:31:d0:0b:ac:63:72:94:44:c6:a3:93:b5:61:69:
         1c:8a:b9:7b:5d:a8:16:84:99:da:9f:8d:4f:af:60:63:63:bd:
         35:4b:5f:1e:e9:ea:1e:73:fe:7f:49:d3:e9:c7:8f:e0:21:0d:
         fe:8f:99:0d:2c:08:e8:bc:e3:ab:76:1b:1f:76:f1:be:5c:b3:
         95:1d:3c:cb:c5:52:76:26:7d:a4:c6:9d:28:fc:57:35:5c:1b:
         c4:eb:98:55:3f:15:3b:ec:d0:c2:a1:3d:e5:0d:aa:17:d9:2e:
         ea:44:dd:47:cc:a4:9b:91:27:00:29:6d:2e:a9:0d:dd:ad:04:
         2b:3e:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:54 2026 by rpki-client